Static task
static1
Behavioral task
behavioral1
Sample
a020fbdcefe445b6d50af6574ef34f2db32a65e987905e41f41afdc971afb71d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a020fbdcefe445b6d50af6574ef34f2db32a65e987905e41f41afdc971afb71d.exe
Resource
win10v2004-20220812-en
General
-
Target
a020fbdcefe445b6d50af6574ef34f2db32a65e987905e41f41afdc971afb71d
-
Size
117KB
-
MD5
10e59e313a6bec8a2f04b587d0014c0e
-
SHA1
b743cf81aa6a35ff7d2671426304bd29df6f51f3
-
SHA256
a020fbdcefe445b6d50af6574ef34f2db32a65e987905e41f41afdc971afb71d
-
SHA512
0fa9fde9a31f1d44cc673e7362873cb9ff66d88b3a5d710f66943cebb61f5dc982c56ba405862587032ce21be492b90f0676a91ac2d8a10246b09ab451efbe5c
-
SSDEEP
768:+hQ5Lbcp+MGOpbN5XdiAo1EXgBh04uXtle+WPi0CSlHhhItUYQzTGfL:siLbcmUikXgPWD2BhoQk
Malware Config
Signatures
Files
-
a020fbdcefe445b6d50af6574ef34f2db32a65e987905e41f41afdc971afb71d.exe windows x86
a20080454e423f72f6ad5e8cced295c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLogicalDriveStringsA
GetDriveTypeA
CreateDirectoryA
SetFileAttributesA
GetWindowsDirectoryA
GetVolumeInformationA
GetLocaleInfoA
CreateToolhelp32Snapshot
GetCurrentProcessId
Process32First
CloseHandle
Process32Next
GetModuleFileNameA
GetEnvironmentVariableA
Sleep
CreateFileA
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetLocalTime
DeleteFileA
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
GetStartupInfoA
VirtualAlloc
VirtualQuery
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
GetLastError
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetFilePointer
ReadFile
GetConsoleMode
GetConsoleCP
GetConsoleOutputCP
WriteFile
SetStdHandle
SetConsoleCtrlHandler
MultiByteToWideChar
WideCharToMultiByte
SetEndOfFile
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qeirafp Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE